IEEE 802.1X Experts in Germany
, matched with vetted and available freelancers in minutesHire experts who design port-based network access controls, configure RADIUS authentication and integrate wired or wireless identity policies with switches, access points and directory services. FRATCH uses AI to match you precisely with vetted, available freelancers for fast project support.
Meet FRATCH Experts in Germany, who have recently used IEEE 802.1X
Christian R.
Last position:
Project Manager, Outlook and Teams Rollout at BWI
- Gathering information
- Creating rollout wave concepts
- Coordinating employees
- Monitoring and managing activities
- Project management including analysis and reporting to the board
- Creating instructions and specifications
- Training floorwalkers
- Supporting the rollout on site
- VIP support
- Introducing SharePoint
Hisham E.
Last position:
System Engineer Network & Security at Isringhausen GmbH
- Operation, maintenance and administration of the global network & security system landscape
- Troubleshooting and support in 2nd & 3rd levels and provide technical advice to other dept.
- Configuration of complex LAN/WAN/SD-WAN and WLAN network infrastructures (N5K, N9K, ASR 8000, Wireless Controller WLC9800, AP C91xx and VMware Velo Cloud)
- Control of external service providers as part of service and escalation management
- Implementation and monitoring of system updates (software upgrades, minor/major changes)
Minh Duc V.
Last position:
Senior System Engineer Network & Security at F.S. Fehrer GmbH & Co. KG
- Responsible for the configuration, maintenance, monitoring, troubleshooting, and optimization of the IT infrastructure, including Extreme Networks, SD-WAN, and Fortinet security solutions, at all international company locations in Europe and North America
- Development of a comprehensive strategic roadmap to optimize the network architecture, including VLANS, NAC, QoS, firewall configurations, VPNs, DPI, NGFW, threat intelligence, and SSL/TLS inspection
- Implementation of the OneIT strategy through the introduction of new technologies such as Cisco DNA Center, ExtremeCloud IQ, FortiOS, FortiManager, and FortiAnalyzer, which increased employee skills and the efficiency of the IT systems
- Integration of IT and OT systems to optimize the network and security architecture and improve operational efficiency
Christoph R.
Last position:
IT Consultant at Augusta Solutions
- Successfully certified as Professional Scrum Master (PSM I)
- Further training in AI trends, prompt engineering, and tools (ComfyUI, SD3.5, Flux, Loras)
- Market analysis for the strategic realignment of the service portfolio
Konstantinos M.
Last position:
IT-Fly Specialist – Global Rollout at Lufthansa Group
Plan & Prepare (Site Design & Readiness): Inventory & Design: Dell PowerEdge R-Series, Aruba switches (L2/L3), notebooks/peripherals; serials/asset tags, IPv4/IPv6 addressing, VLAN-/DHCP-/DNS plan
Runbooks/MOPs: site rollout runbook, backout strategy (<15–30 min), risk register, communication matrix; approvals via CAB/change
Images/Packages: Golden Image (Win10/11), driver packs, BIOS/UEFI baseline; O365/Teams/OneDrive KFM; BitLocker policies; MECM/SCCM, Intune/Autopilot, MDT/WinPE
Logistics: shipping/customs clearance, RMA/DOA, on-site spares; tools (barcode scanner, label printer), "Go-Bag" (cables, SFPs, console cables)
Deliver (on-site implementation): End devices: swap & migration (USMT/OneDrive KFM), peripherals (ATB/BT printers, scanners, boarding gate hardware); domain join, compliance checks, O365 activation, printers/queues, network drives
Acceptance: functional tests for DCS/CUTE/CUPPS/CUSS stations, ticketing/check-in workflows, boarding gates
Server (R-Series): rack & stack, cabling (PDU redundancy, fiber/copper), labeling/naming; firmware/RAID (PERC), Lifecycle Controller, iDRAC network; Windows Server 2022/2025 + CIS/BSI hardening; agents (backup/AV/EDR/monitoring), time service/NTP auth, Syslog/SNMPv3
Network (Aruba): VLANs, LACP trunks, MSTP root; PortFast + BPDU Guard at the edge; QoS (EF/AF); dual stack (v4/v6), DHCP relay. NAC/802.1X with ClearPass/Radius/TACACS+, roles + MAB fallback; guest isolation, ACLs (Guest→Mgmt deny). Telemetry: sFlow, SNMPv3, Syslog→SIEM; LLDP→inventory/CMDB
Airport specifics: CUTE/CUPPS/CUSS terminals; DCS/Amadeus/SITA connectivity; FIDS (read-only); bag tag/boarding pass printing; changes in off-peak/night windows
Stabilize (hypercare): first-day support, KPI tracking (login times, ticket volume, error classes), QoS fine-tuning
Troubleshooting: Wireshark/iperf, event logs, switch counters, sFlow flows; fast incident handling as SPOC
Knowledge transfer: short training sessions for station teams, mini-runbooks (fault/recovery)
Close (documentation & handover): docs & CMDB: final configs (switch/server), topology/patch plans, IP tables, serial/asset lists, before/after photos
Acceptance & sign-off: UAT protocols, functional evidence (use cases), return/reuse of old hardware
Lessons learned: risks, standard packages, driver freeze, "known issues"
Interfaces/communication: station IT, airport IT, SOC/NOC, ground ops/ramp/check-in, provider (SITA/Amadeus). ITSM: ServiceNow (Inc/Req/Change/KB), handover to BAU
André G.
Last position:
IT Consulting Project Management / Engineering Subproject Management at T-Systems (on assignment for government agencies)
- Projects for federal networks (NdB).
- CR management, EoL change requests, design and documentation according to ITSCM.
- Data center planning.
- Project management and engineering subproject management.
- Software development for virtual server environments according to BSI.
Tony R.
Last position:
Network Expert at Self-employed
- Consulting and execution of migration from Cisco AireOS to Cisco IOS-XE controller
- Solution design
- Configuration and staff training
- Products: Catalyst Center, Cisco controllers and IOS and COS access points, 9800-40, 5520, 8510, 9120, 9136, 9166, Catalyst switches, Aruba Clearpass
- Keywords: Tags, profiles, SSIDs, 802.1X authentication, captive portal, Identity PSK (iPSK), VLANs, troubleshooting, automation, RESTCONF, NETCONF, YANG
Jens M.
Last position:
Apple IT Training Trainer at Apple
- Extensive travel in Germany and abroad for Apple IT training
- Training from version 10.5 Leopard to macOS Sonoma
Sami B.
Last position:
German Customer (Pharma Supply-Chain Sector)
- Integration of a FortiManager into the existing FortiGate firewall infrastructure to centralize and optimize firewall management.
Christian D.
Last position:
Managing Director and Senior Consultant at business-security (b-sec®) GmbH
- Conceptual consulting for securing business processes
- Consulting on planning and implementation of IT and IT security projects
- Security and policy checks, process optimizations, emergency planning
- Project management and interim management in IT infrastructure and information security
Overview of relevant projects:
- 2025: Consulting on a DLP concept for Digid GmbH.
- 2025: Consulting a client after a cybersecurity attack that compromised the IT infrastructure and where the attacker obtained M365 tenant admin rights. Investigated the IT infrastructure and restored it. Developed recommendations to improve IT security.
- 2025: Continued the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
- 2024: Created a DNS concept including advice on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones, and automation. Created a DHCP concept including advice on DHCP design, a central DHCP management system and automation. Advised on operating the mentioned products, the operational processes, and updated IT documentation and IT service descriptions for Thyssenkrupp Marine Systems.
- 2024: As-is analysis and assessment of the network and security infrastructure established by providers in terms of overall architecture including design and components. Designed solution proposals to improve current operations for performance and security maximization as well as complexity reduction. Presented the results to C-level, their causes and possible solutions including required decision templates. Developed a SASE concept based on a zero-trust architecture for Norddeutsche Landesbank.
- 2024: Continued the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
- 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proofs of concept for DDoS protection and digital experience monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on zero trust, redesigning a Cisco ISE implementation, and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
- 2023: Continued the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Federal Institute for Geosciences and Natural Resources (until 05/2023), and Union Investment IT-Services GmbH (until 07/2023).
- 2022: Created and reviewed whitepapers for infrastructure and security architectures, and planned new network infrastructures for the German Aerospace Center.
- 2022: Developed a concept for the technical and procedural modernization of a disaster recovery plan for United Nations Volunteers.
- 2022: Developed a concept for migrating measurement data to a cloud environment, introduced network access control, and conducted an awareness training for Digid GmbH.
- 2022: Developed a network segmentation concept for DZ Hyp AG.
- 2022: Developed a network segmentation concept for the Federal Employment Agency.
- 2021: Developed a new load balancer architecture concept for Bundeswehr Fuhrparkservices GmbH.
- 2021: Conducted a vulnerability scan and penetration test of a web frontend including analysis and recommendations for remediation considering risk and likelihood for the client ifi GmbH.
- 2021: Consulting, design, and subproject management for implementing a network access control solution (certificate authentication and MAC address bypass) and macro segmentation (area and zone concept based on dynamic device assignment) in office and production IT for Vaillant Group GmbH.
- 2021: Upgraded and optimized LAN and WLAN infrastructure for United Nations Volunteers.
- 2021: Developed a target concept for modernizing the IT security infrastructure including the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet connections, admin and management networks, and the wireless LAN, including overseeing implementation for the Federal Institute for Geosciences and Natural Resources.
- 2021: Created a micro-segmentation concept based on Cisco DNA, SGT, and zero trust for Union Investment IT-Services GmbH.
- 2021: Reviewed and updated ISMS level 3 policies and created procedure instructions for Software AG.
- 2021: Project lead for the global tech refresh project Meraki WLAN 2.0, coordinated the outsourcing of LAN/WLAN infrastructure to a managed service provider, and created a WLAN concept for automated guided vehicles for Heraeus Infosystems GmbH.
- 2021: Project management and technical support for the 'Transition of SIEM/SOC Services' project migrating a client to a shared environment, and took on the interim role of Head of Security Operations at Datagroup SE.
- 2021: Conducted a workshop for the future implementation of mobile device management for Allgeier Experts Go GmbH.
- 2021: Subproject management for implementing a firewall rule management tool and recertifying NAC endpoints based on 802.1x and MAB for Union Investment IT-Services GmbH.
- 2020: Developed a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
- Recorded and analyzed the current network architecture including project initiation.
- Designed a micro-segmentation concept in the data center and access network.
- 2020: Infrastructure and security architecture audit for Stuttgarter Versicherung AG.
- Analyzed the IT infrastructure and security architecture regarding network and security component configurations. Also reviewed contracts, process documents, and manuals for completeness. Developed recommendations to improve the stability and operation of the infrastructure. Created a network segmentation concept and led the project to implement the measures from the audit.
- 2020: Consulting on setting up an ISMS-light for Josera foodforplanet GmbH & Co. KG.
- 2020: Security architecture consulting for Datagroup SE.
- Developed a future IT infrastructure and IT security architecture.
- Documented the current IT architecture of all 23 entities.
- Made recommendations to optimize the IT infrastructure and drafted a comparison of a traditional perimeter security concept versus a zero trust model.
- Created a security zone concept.
- Designed an IT infrastructure architecture in coordination with all entities.
- 2018 - 2019: Stream lead in the cybersecurity program at Deutsche Lufthansa AG.
- Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
- Project area: Network segmentation and access control.
- Project area: Security architecture.
- Project area: Privileged, identity & access management.
- Project area: Simplify user authentication (MFA).
- Project area: Mobile & endpoint security.
- Project area: OT security.
- Project area: E-enabled aircraft.
- 2018: Security architecture consulting for Deutsche Lufthansa AG.
- Project management for the development, evaluation, and management of the company-wide information security architecture.
- Developed a security strategy and a roadmap to align the security architecture with the zero trust model.
- Evaluated market security solutions, services, and tools.
- Defined requirements for RFPs and assessed proposals.
- Developed, maintained, and monitored security architecture artifacts.
- Conducted security assessments of existing and new IT systems and security services.
- 2018: ISMS consulting for GLS IT Services GmbH.
- Advised on implementing and initially operating an ISMS based on ISO27001.
- Audited the IT environments of GLS country subsidiaries.
- Analyzed and assessed IT security risks and derived necessary measures.
- Developed solution proposals in coordination with relevant stakeholders.
- Managed the project and handed over the ISMS to operations.
- 2016 - 2018: Security pre-sales consultant for Cisco Systems GmbH.
- Provided nationwide strategic and conceptual consulting to major enterprise and financial and insurance clients on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch, and ISE.
- 2017 - 2018: Designed and implemented an ISMS for Verivox GmbH.
- Conducted various BIAs and gap analyses.
- Developed security policies based on ISO 2700x.
- Served as interim information security officer.
- 2017: Developed an emergency concept for VPV Lebensversicherungs-AG.
- Reviewed and updated the IT emergency manual.
- 2016: Consulting and project management for designing cloud & hosting services for Vodafone Group Services GmbH.
- Analyzed and optimized the sell-build-run process.
- Created detailed level designs for cloud products.
Abdelhak M.
Last position:
Network Architect at Bechtle Managed Services GmbH
- Created as-is network documentation for a Bechtle customer
- Analyzed existing configurations and adjusted them
- Advised on Fortinet and Check Point products
- Troubleshot complex routing, switching and application issues
- Tools: MS Azure, FortiManager, Cisco Nexus & Catalyst, Cisco WLAN Controller, Citrix Netscaler SD-WAN, MS Visio, Checkpoint VSX, Wireshark
Matthias W.
Last position:
Self-employed at maweos GmbH
Christian W.
Last position:
Cisco Catalyst Center - SDA Wireless Consultant at IT Service Provider
- Implementation of Cisco Catalyst Center wireless network for a federal ministry in Berlin with focus on wireless topics
- Troubleshooting of day 0, day 1 and ongoing templates for zero-touch provisioning of switches and access points
- Client authentication and authorization troubleshooting using Cisco ISE
- Wireless guest access via Cisco ISE captive portals
- Ekahau site surveys and WLAN survey reports
- Cisco DNA Center, Cisco WLC and Cisco ISE
- LAN and WLAN network design and planning based on existing HLD and LLD documents
- C9300L and C9500 series switches, CW9166i access points
Charles J.
Last position:
Network Architect at RedGlobal GmbH
- Configuration of Dell switches, routers, and access points.
- Error analysis and resolution.
- Environment: Extreme, Cisco and Dell switches and routers, Extreme A3 NAC, Extreme CloudIQ.
Majid A.
Last position:
Lead Consultant at Infosys
- Network automation
- CI/CD and Docker environment
- Python Nornir for network automation
- pyATS for monitoring and test case automation
- Network Access Control (RADIUS) and device admin access control (TACACS) with AAA and Cisco ISE on Cisco/HP/Aruba devices
- Cisco ISE cluster configuration (2/4/8 nodes)
- Cisco ISE authentication and authorization configuration
- Cisco/HP/Aruba switch/WLC TACACS/dot1x/RADIUS configuration
- Cisco ISE automation with RESTCONF and Python
Discover over 15,000 top freelancers
Statistics of experts using IEEE 802.1X
Aggregated from the professional profiles of matched freelancers.
Experience
26 years
Position duration
4.2 years
Positions per freelancer
18
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Telecommunication, Manufacturing
Certification focus areas
Information Technology, Project Management, Human Resources
Bachelor's degree or higher
70%
Master's degree or higher
50%
Certifications per freelancer
7
Most common languages
German, English, Arabic
Speak two or more languages
100%
Based on our profile pool as of 19 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Germany using IEEE 802.1X
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 19 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
IEEE 802.1X experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (87%)
- Telecommunication (67%)
- Manufacturing (60%)
- Automotive (47%)
- Banking and Finance (47%)
- Professional Services (40%)
- Aerospace and Defense (33%)
- Education (33%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Access control
IEEE 802.1X is an IEEE standard for port-based network access control. It verifies a device or user before granting access to a wired switch port or wireless network. The model separates the supplicant, authenticator and authentication server, creating a controlled entry point for enterprise connectivity.
Authentication flow
A typical deployment uses EAPOL between the endpoint and network access device, then forwards authentication through RADIUS to a central service. Experts work with EAP methods such as EAP-TLS, certificates, passwords and machine identity. They also define how failed, unknown or non-compliant devices are handled.
Ecosystem
- 1X connects network infrastructure with identity, endpoint and certificate systems. Relevant tools and components include:
- Managed switches, wireless access points and network access control platforms
- RADIUS services such as FreeRADIUS and Microsoft NPS
- Active Directory, LDAP, PKI and certificate authorities
- EAP-TLS, device certificates and supplicant configuration
Where it fits
Companies use IEEE 802.1X to protect office networks, production sites, campuses, healthcare environments and distributed workplaces. It supports access policies for managed laptops, industrial equipment, phones, guests and devices that cannot use ordinary user authentication. In Germany, specialists may need to coordinate remote policy work with on-site network and facilities teams.
When expertise helps
Freelance expertise is useful when a company is replacing shared network credentials, rolling out certificate-based access or troubleshooting inconsistent authentication. Typical assignments include:
- Designing wired and wireless access policies
- Integrating RADIUS with identity directories and PKI
- Migrating switches and access points without disrupting operations
- Investigating EAP, certificate, VLAN and roaming failures
Strong professionals
Strong professionals understand both the standard and the operational details around it. They can trace an authentication exchange, interpret RADIUS and switch logs, validate certificate chains and explain the impact of VLAN assignment or posture checks. They document fallback access, test endpoint variations and leave a supportable configuration rather than a collection of undocumented exceptions.
Frequently asked questions
Key details about IEEE 802.1X, drawn from the questions we get asked most.
IEEE 802.1X controls access to wired and wireless networks by requiring endpoint or user authentication before normal connectivity is granted. Companies use it to replace shared network passwords, apply identity-based policies and limit access from unknown or unmanaged devices.
802.1X provides individual or device-based authentication through EAP and a RADIUS service, while a shared Wi-Fi password gives every user the same credential. Enterprise authentication supports revocation, auditability and policy changes without distributing one common secret.
A strong IEEE 802.1X expert usually understands switching, enterprise Wi-Fi, VLANs, RADIUS, EAP and certificate services. Experience with Active Directory, Microsoft NPS, FreeRADIUS, network access control and endpoint management is also valuable.
The right IEEE 802.1X specialist depends on the scope and risk of the rollout, not on a fixed experience threshold. A small troubleshooting task may need focused protocol and log analysis, while a large migration requires proven work across network infrastructure, PKI, endpoint types and rollback planning.
802.1X can be adapted for printers, sensors, phones and industrial equipment through device certificates, MAC-based fallback or carefully controlled exceptions. A qualified expert should assess the security trade-offs and prevent fallback methods from becoming an unrestricted path into the network.
Much of an IEEE 802.1X project can be handled remotely, including policy design, RADIUS configuration, certificate checks and log analysis. On-site support may still help with switch access, endpoint testing and facilities coordination, so teams should agree on access windows and communication language early.
Ask an 802.1X professional to explain an authentication flow and diagnose a realistic failure involving EAP, certificates, RADIUS or VLAN assignment. Quality is shown through clear test plans, least-privilege policies, documented fallback access and evidence from logs rather than guesses.
An IEEE 802.1X freelancer should clarify the switch and wireless vendors, RADIUS and directory environment, certificate authority, endpoint types and required access policies. They should also confirm maintenance windows, lab coverage, rollback arrangements and who can approve changes to production networking.
The average hourly rate of freelancers in Germany who have used IEEE 802.1X in their recent projects is 105 €, which corresponds to a daily rate of about 840 € based on an 8-hour working day.
Of the freelancers in Germany who have used IEEE 802.1X in their recent projects, 70% hold at least a Bachelor's degree and 50% hold at least a Master's degree.
On average, freelancers in Germany who have used IEEE 802.1X in their recent projects have 26 years of professional experience, with a single engagement typically lasting around 4.2 years.
The most common languages among freelancers in Germany who have used IEEE 802.1X in their recent projects are German (100%), English (100%), and Arabic (13%).
The most common industries among freelancers in Germany who have used IEEE 802.1X in their recent projects are Information Technology (87%), Telecommunication (67%), and Manufacturing (60%).
The most common business areas among freelancers in Germany who have used IEEE 802.1X in their recent projects are Information Technology (100%), Operations (80%), and Project Management (80%).
Main locations of FRATCH Experts, who have recently used IEEE 802.1X
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
